220-1102 Practice Test 8 — 10 Questions

Question 1

A security incident occurred where an unauthorized user gained access to a workstation. The security team needs to review detailed logs of all user logon attempts, including successful and failed logins, for the past 48 hours. Which administrative tool and specific log should you access to provide this information?

Accepted Answer

Event Viewer > Windows Logs > Security. Event Viewer's Windows Logs > Security log records all security-related events, including logon attempts (success and failure). This is the standard location for auditing user activity. Other logs like System or Application do not focus on authentication events.

Answer

Event Viewer > Windows Logs > System

Answer

Event Viewer > Applications and Services Logs > Microsoft > Windows > TerminalServices-LocalSessionManager

Answer

Computer Management > System Tools > Shared Folders > Sessions

Question 2

A customer complains that their Windows 10 PC fails to boot and displays a 'Bootmgr is missing' error. You suspect the Boot Configuration Data (BCD) is corrupted. Which tool should you use to repair the BCD from the Windows Recovery Environment?

Accepted Answer

bootrec /rebuildbcd. The bootrec tool is specifically designed to repair BCD and boot sector issues. Running bootrec /rebuildbcd scans for Windows installations and rebuilds the BCD store.

Answer

chkdsk /f

Answer

sfc /scannow

Answer

diskpart

Question 3

A small business owner wants to ensure that only authorized users can log into their Windows 10 workstations. They need a tool to create and manage user accounts and set password policies. Which administrative tool should you use?

Accepted Answer

Local Users and Groups. Local Users and Groups (lusrmgr.msc) is the snap-in for managing user accounts, groups, and local security policies on a standalone Windows system. It allows creating, modifying, and deleting users and setting password requirements.

Answer

Computer Management

Answer

Group Policy Editor

Answer

Task Scheduler

Question 4

Your company is deploying a new application that requires .NET Framework 3.5 on multiple Windows 10 workstations. You need to enable this feature on a single test machine first. Which tool should you use?

Accepted Answer

Windows Features. Windows Features (accessible via 'Turn Windows features on or off' in the Control Panel or Settings) is the correct tool to enable .NET Framework 3.5 on a Windows 10 workstation. This feature includes .NET 2.0 and 3.0, and it can be installed from local sources or Windows Update. Programs and Features is used for uninstalling or changing installed programs, not for enabling Windows roles or features.

Answer

Programs and Features

Answer

Device Manager

Answer

Services

Question 5

A user is unable to install a new printer on their Windows 10 workstation because the 'Print Spooler' service is not running. You need to start the service and ensure it starts automatically on boot. Which tool should you use?

Accepted Answer

Services. The Print Spooler is a Windows service that manages print jobs sent to the printer. To start it and set its startup type to Automatic, you must use the Services console (services.msc), which provides direct control over service state and startup configuration. Device Manager manages hardware drivers, not service states.

Answer

Device Manager

Answer

Task Scheduler

Answer

System Configuration

Question 6

Your company's security policy requires that all workstations have the latest Windows security updates installed. You need to verify the update history on a user's Windows 10 PC to ensure no critical updates are missing. Which tool should you use?

Accepted Answer

Windows Update. Windows Update settings (in Settings app or old Control Panel) shows update history, including installed updates and their dates. This is the standard way to check which updates have been applied.

Answer

Event Viewer

Answer

System Information

Answer

Reliability Monitor

Question 7

A user's Windows 10 PC is experiencing random freezes and application crashes. You suspect a corrupted system file. You run sfc /scannow but it reports that it cannot repair some files. What is the next best step to repair the system files using a DISM command?

Accepted Answer

Run DISM /Online /Cleanup-Image /RestoreHealth. The correct next step is to run DISM /Online /Cleanup-Image /RestoreHealth because SFC (System File Checker) relies on a healthy component store (WinSxS) to replace corrupted files. When SFC cannot repair files, it indicates the component store itself may be damaged. DISM repairs the component store by using Windows Update as the source, or a specified repair source, thereby enabling SFC to succeed on a subsequent scan.

Answer

Run chkdsk /f

Answer

Run System Restore

Answer

Run Windows Update

Question 8

A technician is troubleshooting a Windows 10 PC that fails to boot with a 'Bootmgr is missing' error. They need to repair the boot configuration. Which administrative tool should be used from the Windows Recovery Environment (WinRE)?

Accepted Answer

Command Prompt to run bootrec /rebuildbcd.. The Command Prompt in WinRE allows running bootrec.exe and bcdedit.exe to repair the boot configuration. System Restore and Startup Repair are also in WinRE but do not directly rebuild the BCD. The other options are not available in WinRE.

Answer

System Restore to revert to a previous restore point.

Answer

Device Manager to update the disk driver.

Answer

Local Security Policy to adjust boot options.

Question 9

A customer reports that their Windows 11 PC is displaying a 'Low Disk Space' warning on the C: drive. You need to quickly free up space by removing temporary files and system cache. Which administrative tool should you use?

Accepted Answer

Disk Cleanup to delete temporary files and system cache.. Disk Cleanup (cleanmgr.exe) is the built-in tool for removing temporary files, system cache, and other unnecessary data. Storage Sense can automate this, but Disk Cleanup is the direct tool for manual cleanup. The other options do not clean temporary files.

Answer

Defragment and Optimize Drives to consolidate free space.

Answer

Computer Management > Disk Management to shrink the volume.

Answer

Event Viewer to clear application logs.

Question 10

A technician is troubleshooting a Mac that fails to connect to a Wi-Fi network. The network is visible, but entering the correct password results in an 'unable to join the network' error. The technician wants to delete the saved network configuration to start fresh. Which macOS tool or location should they use?

Accepted Answer

System Settings > Network > Wi-Fi > Details > Remove this network.. Option A is correct because macOS stores Wi-Fi network configurations (including SSID, security type, and saved passwords) in the system's network preferences. By navigating to System Settings > Network > Wi-Fi, clicking Details next to the network, and selecting 'Remove This Network', the technician completely deletes the saved configuration, forcing macOS to treat the network as new on the next connection attempt. This resolves issues where a corrupted or outdated saved configuration prevents successful authentication despite entering the correct password.

Answer

Keychain Access and delete the Wi-Fi password entry.

Answer

Terminal with the 'networksetup -setairportnetwork' command.

Answer

System Information > Network > Wi-Fi.